Tyler Josephson’s lab sits off a main corridor in the department of chemical, biochemical and environmental engineering at UMBC. Open the door, though, and you’ll see nary a beaker, chemical closet, or lab coat. Inside, a few computers sit on tables. You might see equations scrawled on the white board or a few students poring over lines of code.

Using this modest setup, Josephson has launched an ambitious project to equip computers to make scientific discoveries—starting in the realm of chemistry. This March he won a prestigious NSF CAREER award to advance the project.

The goal of the work is ultimately to speed up the process of science, which should in turn give humanity new knowledge and tools to face down big challenges such as climate change and environmental degradation.

As Josephson and his students dive into the work, they are bringing together techniques from across mathematics, computer science, and chemical engineering. Their first step is to translate chemical theories into a rigorous mathematical language that a computer can understand.

Math as the language of science

In 1623, the Italian natural philosopher Galileo Galilei wrote an essay in which he described nature as a book written in “the language of mathematics.” Many scientists since have puzzled over the mysterious power of math to describe physical phenomena.

Josephson and his students are tapping into this power. They are using a tool developed by researchers at Microsoft called the Lean theorem prover. Lean is both a computer language and a program for checking each step of a rigorous mathematical proof.

“Formal proofs, which are verified by a computer, differ from the informal, handwritten versions often used by scientists,” says Josephson. Informal proofs are easier to write, but they usually skip logical steps, assuming a human reader will have the knowledge and skill to follow along. This means that errors can creep in undetected.

On the other hand, if a proof has been written and checked in Lean, it is guaranteed to be correct as long as the stated assumptions are true.

A community of Lean programmers

Lean has a dedicated community of volunteer developers who have built a large library of mathematical proofs, each of which can then serve as a building block for more complicated proofs. They aim to digitize mathematics, starting with the entirety of the undergraduate math curriculum, which will lay the foundation for formal proofs in advanced modern mathematics.

Josephson plans to build a similar library with formally correct derivations in science and engineering, starting with chemical concepts such as the thermodynamic behavior of gases and of molecules sticking and unsticking from surfaces.

He and his students describe their approach in a first paper on the subject, and are in the process of submitting it to journals.

The power of the work will multiply as more of the foundations of science are translated into Lean, so a large part of the team’s work will also be to recruit, inspire, and train fellow proof creators. They will hold workshops to showcase Lean for scientists and engineers, and they plan to create fun and educational games that will teach Lean-programming skills to newcomers.

“I’m really excited to share this tool with students and the scientific community,” Josephson says.

Building better scientific computing tools

Josephson’s goal to formally verify scientific theories isn’t just an intellectual exercise—it’s a means of building better tools for better science. One such tool he plans to create with NSF CAREER award support is Lean-based computer software that can simulate the behavior of molecules under a range of conditions. 

Scientists often use such software to test theories as an alternative to physical experiments. It can be easier to run simulations of reactions on a computer, for example, than to mix real chemicals again and again, and some molecular phenomena may happen so fast, or under such extreme conditions, that current experimental tools cannot capture them.

However, bugs can mar the performance of the software. For example, starting in 2011, a hidden coding error fueled a seven-year “war over supercooled water,” in which two scientific groups disagreed about what happens to ultrapure water when it is cooled significantly below the freezing point of normal water, and then suddenly crystallizes.

Code written in Lean is unique from that written in the programming languages commonly used in scientific computing, since it can be provably free of such math errors, Josephson says. 

As more scientists and engineers learn to write code and proofs in Lean, others will be able to write bug-free software for applications as diverse as weather forecasting, drug discovery, and predicting material performance.

“AI scientists” who reason on their own

Ultimately, Josephson hopes to use a Lean-based library of scientific knowledge to train computers as fellow scientists. For example, large language models, such as the recently popularized ChatGPT, might be trained on a library of scientific proofs and gain the ability to “autocomplete” proofs on their own, translate informal proofs from the literature into formal ones, and even discover entirely new scientific theories, which could then be checked for correctness by Lean.

A tool like this might revolutionize science. In Galileo’s time, a single person could master large portions of human scientific knowledge, but now scientists usually go to school for decades to become experts in a tiny subfield, Josephson says.

AI scientists capable of digesting a database of thousands of scientific proofs in multiple disciplines might draw connections across them to reveal new discoveries. “Such a tool could lead to an AI-powered Renaissance in interdisciplinary scientific discovery,” says Josephson.

While such lofty goals remain in the future, Josephson and his students are energized by the possibilities. As they embark on an exciting scientific journey, they are thrilled to bring as many people as possible along on the ride.

Dean Kimberly Moffitt & Christine Mallinson

photo courtesy of Taka Yamashita

Congratulations to Christine Mallinson for being named the 2023-2024 Lipitz Professor!

Established by the Roger C. Lipitz and the Lipitz Family Foundation, the fellowship is intended "to recognize and support innovative and distinguished teaching and/or research in the Arts, Humanities and Social Sciences." 

"I'll be taking this year to move my research forward, especially my two current collaborative NSF funded projects at the intersection of language, culture, technology, and society -- and I'll be looking forward to sharing about our work with my colleagues at UMBC next spring!"

Written by Richard Forno, principal lecturer in computer science and electrical engineering, UMBC

Editor’s note: This article contains plot spoilers.

Society’s understanding of technology and cybersecurity often is based on simple stereotypes and sensational portrayals in the entertainment media. I’ve written about how certain scenarios are entertaining but misleading. Think of black-clad teenage hackers prowling megacities challenging corporate villains. Or think of counterintelligence specialists repositioning a satellite from the back of a surveillance van via a phone call.

But sometimes Hollywood gets it right by depicting reality in ways that both entertain and educate. And that’s important, because whether it’s a large company, government or your personal information, we all share many of the same cybersecurity threats and vulnerabilities. As a former cybersecurity industry practitioner and current cybersecurity researcher, I believe the final season of “Star Trek: Picard” is the latest example of entertainment media providing useful lessons about cybersecurity and the nature of the modern world.

So how does “Star Trek: Picard” relate to cybersecurity?

The nature of the threat

The show’s protagonist is Jean-Luc Picard, a retired Starfleet admiral who commanded the starship Enterprise-D in a previous series. Starfleet is the military wing of the United Federation of Planets, of which Earth is a member. In Season 3, the final season, Picard’s ultimate enemy, the Borg, returns to try conquering humanity again. The Borg is a cybernetic collective of half-human, half-machine “drones” led by a cyborg queen.

The Borg has partnered with other villains and worked for over a decade to deploy hidden agents able to compromise the DNA data contained in the software underpinning the transporter – a teleportation device used regularly by Starfleet personnel. Over many years, a certain subgroup of Starfleet personnel had their DNA altered by using the transporter.

Thus, in launching their final attack, the Borg is able to instantly activate thousands of “drones” to do its bidding in the form of altered, compromised Starfleet personnel. As Geordi La Forge, the Enterprise-D’s engineer, notes, “They’ve been assimilating the entire fleet this whole time, without anyone ever knowing it.”

The Borg’s prolonged, stealthy infiltration of the federation is indicative of how today’s most effective cyberattackers work. While it’s relatively easy to detect when hackers attempt to breach a system from the outside, experts worry about the effects of an enemy infiltrating critical systems from within. Attackers can put malicious code in software during manufacturing or in software updates, both of which are avenues of attack that do not arouse suspicion until the compromised systems are activated or targeted.

This underscores the importance of ensuring the security and integrity of digital supply chains from product development at the vendor through product deployment at client sites to ensure no silent “drones,” such as malware, are waiting to be activated by an adversary.

Equally important, “Star Trek: Picard” presents the very real and insidious nature of the insider threat faced by today’s organizations. While not infected with a cybernetic virus, recently arrested Massachusetts Air National Guard airman Jack Teixeira shows the damage that can occur when a trusted employee has malicious intent or becomes co-opted and inflicts significant damage on an employer.

In some cases, these compromised or malicious individuals can remain undiscovered for years. And some global adversaries of the U.S., such as China and Russia, are known for taking a long-term perspective when it comes to planning and conducting espionage activities – or cyberattacks.

Humans remain the weakest link

“Synchronistic technology that allows every ship in Starfleet to operate as one. An impenetrable armada. Unity and defense. The ultimate safeguard.”

With these words, humanity’s military defenders activated a feature that linked every Starfleet vessel together under one unified automated command system. While intended to serve as an emergency capability, this system – called Fleet Formation – was quickly hijacked by the Borg as part of its attack on Earth. In essence, Starfleet created a Borg-like defense system that the Borg itself used to attack the federation.

Here, the most well-intentioned plans for security were thwarted by enemies who used humanity’s own technologies against them. In the real world, capabilities such as on-demand real-time software updates, ChatGPT and centrally administered systems sound enticing and offer conveniences, cost savings or new capabilities. However, the lesson here is that organizations should not put them into widespread use without carefully considering as many of the potential risks or vulnerabilities as practical.

But even then, technology alone can’t protect humans from ourselves – after all, it’s people who develop, design, select, administer and use technology, which means human flaws are present in these systems, too. Such failings frequently lead to a stream of high-profile cybersecurity incidents.

Resiliency is not futile

To counter the Borg’s final assault on Earth, Picard’s crew borrows its old starship, Enterprise-D, from a fleet museum. The rationale is that its ship is the only major combat vessel not connected to the Borg collective via Starfleet’s compromised Fleet Formation protocol and therefore is able to operate independently during the crisis. As La Forge notes, “Something older, analog. Offline from the others.”

From a cybersecurity perspective, ensuring the availability of information resources is one of the industry’s guiding principles. Here, the Enterprise-D represents defenders in response to a cyber incident using assets that are outside of an adversary’s reach. Perhaps more important, the vessel symbolizes the need to think carefully before embracing a completely networked computing environment or relying on any single company or provider of services and connectivity for daily operations.

From natural disasters to cyberattack, what’s your plan if your IT environment becomes corrupted or inaccessible? Can your organization stay operational and still provide necessary services? For critical public messaging, do governments and corporations have their own uncorruptible Enterprise-D capabilities to fall back on, such as the fediverse, the decentralized microblogging platform that is immune to the impulsive manipulations of Twitter’s ownership?

Prepare for the unknown

The “Star Trek” universe explores the unknown in both the universe and contemporary society. How the crews deal with these experiences relies on their training, the appreciation of broad perspectives and ability to devise innovative solutions to the crisis of the week. Often, such solutions are derived from characters’ interests in music, painting, archaeology, history, sports and other nontechnical areas of study, recreation or expertise.

Similarly, as modern digital defenders, to successfully confront our own cyber unknowns we need a broad appreciation of things beyond just cybersecurity and technology. It’s one thing to understand at a technical level how a cyberattack occurs and how to respond. But it’s another thing to understand the broader, perhaps more systemic, nuanced, organizational or international factors that may be causes or solutions, too.

Lessons from literature, history, psychology, philosophy, law, management and other nontechnical disciplines can inform how organizations plan for and respond to cybersecurity challenges of all types. Balancing solid technical knowledge with foundations in the liberal arts and humanities allows people to adapt comfortably to constantly evolving technologies and shifting threats.

Dystopic metaphors in fiction often reflect current social concerns, and the “Star Trek” universe is no different. Although rooted in a science fiction fantasy, “Star Trek: Picard” provides some accurate, practical and understandable cybersecurity reminders for today.

Season 3, in particular, offers viewers both entertainment and education – indeed, the best of both worlds.

This article is republished from The Conversation under a Creative Commons license. Read the original article and see more than 250 UMBC articles available in The Conversation.